Thread Info
  • State Not Answered
  • Replies 1 reply
  • Subscribers 6 subscribers
  • Views 53 views
  • Users 0 members are here
Options
Suggested

Exposed Host - Security risk?

Paul Zerto

I have a very small customer who has a Sophos UTM. The connection is made via Sophos with PPPoE via a Fritzbox as a modem (PPPoE passthrough). Now a second connection is to be installed, but the customer wants to use the FritzBox Cable as an exposed host, so that the dial-in is not with the Sophos but with the FritzBox.

How do you assess the security risk in such a mode? I am not a fan of this and would like to convince the customer to run the dial-in (PPPoE) via Sophos.

Parents
  • 0

    A direct Sophos-PPPoE dial in connection isn't more secure than an exposed host.
    I would recommend using the FB to do the dial in Job and only forward needed ports.
    In this design-variant, the FB works like a packet-filter firewall in front of Sophos.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • 0

    A direct Sophos-PPPoE dial in connection isn't more secure than an exposed host.
    I would recommend using the FB to do the dial in Job and only forward needed ports.
    In this design-variant, the FB works like a packet-filter firewall in front of Sophos.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children
No Data
Unfiltered HTML